Certificate

$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7mx6YXmeqtwUjtYu7jUHHcrX08.cer
File:                     V7mx6YXmeqtwUjtYu7jUHHcrX08.cer (raw, json)
Hash identifier:          0xxWYRMMhOb+BW8+6eEnl1hsc8UHaeuPU+erJ8qAt6M=
Subject key identifier:   57:B9:B1:E9:85:E6:7A:AB:70:52:3B:58:BB:B8:D4:1C:77:2B:5F:4F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       02D1C0
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/V7mx6YXmeqtwUjtYu7jUHHcrX08.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 31 Aug 2026 04:00:38 +0000
Certificate not after:    Tue 01 Dec 2026 00:00:00 +0000
Subordinate resources:    IP: 103.71.148.0/22
                          IP: 103.234.8.0/22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 03:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184768 (0x2d1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Aug 31 04:00:38 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=A9175848, serialNumber=57B9B1E985E67AAB70523B58BBB8D41C772B5F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d7:2a:27:5d:ad:0a:4f:b0:6b:63:7b:9c:ba:
                    c5:96:b9:fe:98:c2:73:c4:af:c8:5f:95:42:a7:af:
                    16:2c:0f:ae:87:89:34:8a:d6:7f:52:31:fe:9b:b8:
                    55:d9:0a:96:ca:29:ee:c2:f0:3a:5f:f3:8a:d6:3c:
                    90:8a:c6:9c:a8:cf:80:59:bd:90:ca:c1:42:f7:60:
                    c2:07:bc:be:c9:04:f7:52:af:d4:ca:37:f8:fe:a1:
                    9d:09:24:c5:88:e2:55:3d:04:9c:40:1c:e8:ea:94:
                    e5:52:95:a7:5b:b2:69:11:38:43:dd:ae:54:4d:ba:
                    6a:ae:24:09:01:58:9f:95:bd:20:7f:34:fd:44:5d:
                    cd:2d:c5:a5:bb:9f:7d:90:83:ef:fe:2d:66:f1:b0:
                    92:09:8b:72:54:7c:a0:b6:f9:2b:36:d0:8d:e1:97:
                    e4:08:d0:f8:4a:10:f8:95:c6:65:0b:8d:16:f7:ac:
                    3e:a6:c7:12:7f:f1:e4:61:2c:a8:e4:db:be:54:51:
                    83:24:f9:0f:e9:b8:f7:a5:15:e6:50:ef:38:29:49:
                    bf:e4:c8:ad:4d:35:14:e7:58:e9:37:33:1c:09:41:
                    72:50:a3:8b:95:44:db:2b:d7:09:1b:3e:70:21:bf:
                    e9:d0:1d:b1:9b:93:59:81:42:33:79:35:02:8d:e9:
                    73:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B9:B1:E9:85:E6:7A:AB:70:52:3B:58:BB:B8:D4:1C:77:2B:5F:4F
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9175848/835BC4F6A4F011F192AEC5B06B11F970/V7mx6YXmeqtwUjtYu7jUHHcrX08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.148.0/22
                  103.234.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:b8:74:dc:ab:fc:10:8d:99:d6:20:47:20:80:ae:02:3e:36:
         b7:9e:b3:8a:bc:1b:8c:79:34:9a:40:c2:a3:38:3b:9e:a4:4f:
         5a:f5:b1:66:c0:5f:d6:58:64:e1:c1:ba:95:9d:2a:b2:45:42:
         5b:32:39:6f:84:ed:c0:d5:e1:b4:b3:cc:2f:51:a1:b8:2b:32:
         ad:59:d5:c9:b2:52:d6:fc:41:68:2e:39:b6:5e:5a:0c:82:1d:
         94:ce:5b:05:0b:26:1c:5d:82:10:dd:e8:4a:f9:a3:02:10:2d:
         48:fd:58:97:49:d6:ea:36:4a:73:9c:fb:80:54:a8:0e:07:9d:
         de:95:7a:4e:73:f4:d4:bb:40:01:12:0f:64:45:47:71:05:61:
         f2:21:29:b1:e4:29:46:91:7b:c9:c9:0c:03:1a:10:88:90:6a:
         fc:5b:6d:73:11:76:6b:38:67:bf:51:8c:e4:c6:41:27:f0:af:
         9f:fb:37:02:2b:95:09:fe:46:0b:84:24:35:4c:dd:56:a0:8e:
         23:c4:0f:b7:5a:c1:ac:f5:92:39:97:62:1b:a9:98:56:9d:b6:
         ed:66:fe:ed:f9:d5:0b:d7:20:e4:67:88:73:1c:0d:39:0f:b9:
         56:d1:52:f4:b8:09:9d:d6:1e:25:cd:3a:b5:d0:c4:27:d6:dc:
         13:7d:4c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:39:40 2026 by rpki-client